CVE-2017-14191 — Fortinet, Inc. / FortiWeb

CVE-2017-14191

Fortinet, Inc. / FortiWeb PUBLISHED

Description (CNA)

An Improper Access Control vulnerability in Fortinet FortiWeb 5.6.0 up to but not including 6.1.0 under "Signed Security Mode", allows attacker to bypass the signed user cookie protection by removing the FortiWeb own protection session cookie.

Affected (CNA)

Vendor / product	Versions
Fortinet, Inc. / FortiWeb	affected 5.6.0 and above

CWE

No CWE identifiers supplied.

References

http://www.securityfocus.com/bid/103430
https://fortiguard.com/advisory/FG-IR-17-279

ADP enrichment

CVE

No English description supplied.

http://www.securityfocus.com/bid/103430
https://fortiguard.com/advisory/FG-IR-17-279

CISA-ADP

No English description supplied.

No references supplied.